Russell Ballestrini
ccd723db99
Changed --restore to take snapshot ID directly and call /snapshots/:id/restore instead of requiring --from SNAPSHOT_ID and calling /sessions/:id/restore or /services/:id/restore. Updated session and service restore in all implementations: - un.py, un.go, un.rb, un.sh, un.ex, un.erl, un.fs, un.hs - un.groovy, un.r, un.m, un.awk Also added snapshot management features where missing.
1069 lines
35 KiB
Awk
1069 lines
35 KiB
Awk
# PUBLIC DOMAIN - NO LICENSE, NO WARRANTY
|
|
#
|
|
# This is free public domain software for the public good of a permacomputer hosted
|
|
# at permacomputer.com - an always-on computer by the people, for the people. One
|
|
# which is durable, easy to repair, and distributed like tap water for machine
|
|
# learning intelligence.
|
|
#
|
|
# The permacomputer is community-owned infrastructure optimized around four values:
|
|
#
|
|
# TRUTH - First principles, math & science, open source code freely distributed
|
|
# FREEDOM - Voluntary partnerships, freedom from tyranny & corporate control
|
|
# HARMONY - Minimal waste, self-renewing systems with diverse thriving connections
|
|
# LOVE - Be yourself without hurting others, cooperation through natural law
|
|
#
|
|
# This software contributes to that vision by enabling code execution across 42+
|
|
# programming languages through a unified interface, accessible to all. Code is
|
|
# seeds to sprout on any abandoned technology.
|
|
#
|
|
# Learn more: https://www.permacomputer.com
|
|
#
|
|
# Anyone is free to copy, modify, publish, use, compile, sell, or distribute this
|
|
# software, either in source code form or as a compiled binary, for any purpose,
|
|
# commercial or non-commercial, and by any means.
|
|
#
|
|
# NO WARRANTY. THE SOFTWARE IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND.
|
|
#
|
|
# That said, our permacomputer's digital membrane stratum continuously runs unit,
|
|
# integration, and functional tests on all of it's own software - with our
|
|
# permacomputer monitoring itself, repairing itself, with minimal human in the
|
|
# loop guidance. Our agents do their best.
|
|
#
|
|
# Copyright 2025 TimeHexOn & foxhop & russell@unturf
|
|
# https://www.timehexon.com
|
|
# https://www.foxhop.net
|
|
# https://www.unturf.com/software
|
|
|
|
#!/usr/bin/awk -f
|
|
# un.awk - Unsandbox CLI Client (AWK Implementation)
|
|
#
|
|
# Usage: awk -f un.awk <source_file>
|
|
#
|
|
# Note: AWK has limited capabilities, so this uses system() to call curl
|
|
# Requires: UNSANDBOX_API_KEY environment variable
|
|
|
|
BEGIN {
|
|
API_BASE = "https://api.unsandbox.com"
|
|
PORTAL_BASE = "https://unsandbox.com"
|
|
|
|
# Extension to language map
|
|
split("py:python js:javascript ts:typescript rb:ruby php:php pl:perl lua:lua sh:bash go:go rs:rust c:c cpp:cpp java:java kt:kotlin cs:csharp fs:fsharp hs:haskell ml:ocaml clj:clojure scm:scheme lisp:commonlisp erl:erlang ex:elixir jl:julia r:r cr:crystal d:d nim:nim zig:zig v:v dart:dart groovy:groovy f90:fortran cob:cobol pro:prolog forth:forth tcl:tcl raku:raku m:objc awk:awk ps1:powershell", pairs, " ")
|
|
for (i in pairs) {
|
|
split(pairs[i], kv, ":")
|
|
ext_map[kv[1]] = kv[2]
|
|
}
|
|
|
|
# Colors
|
|
BLUE = "\033[34m"
|
|
RED = "\033[31m"
|
|
GREEN = "\033[32m"
|
|
RESET = "\033[0m"
|
|
}
|
|
|
|
function get_api_keys( public_key, secret_key, cmd) {
|
|
# Get public key
|
|
cmd = "echo -n $UNSANDBOX_PUBLIC_KEY"
|
|
cmd | getline public_key
|
|
close(cmd)
|
|
|
|
# Get secret key
|
|
cmd = "echo -n $UNSANDBOX_SECRET_KEY"
|
|
cmd | getline secret_key
|
|
close(cmd)
|
|
|
|
# Fallback to old UNSANDBOX_API_KEY for backwards compat
|
|
if (public_key == "") {
|
|
cmd = "echo -n $UNSANDBOX_API_KEY"
|
|
cmd | getline public_key
|
|
close(cmd)
|
|
secret_key = ""
|
|
}
|
|
|
|
if (public_key == "") {
|
|
print RED "Error: UNSANDBOX_PUBLIC_KEY or UNSANDBOX_API_KEY not set" RESET > "/dev/stderr"
|
|
exit 1
|
|
}
|
|
|
|
GLOBAL_PUBLIC_KEY = public_key
|
|
GLOBAL_SECRET_KEY = secret_key
|
|
}
|
|
|
|
function get_extension(filename) {
|
|
n = split(filename, parts, ".")
|
|
if (n > 1) {
|
|
return parts[n]
|
|
}
|
|
return ""
|
|
}
|
|
|
|
function escape_json(s) {
|
|
gsub(/\\/, "\\\\", s)
|
|
gsub(/"/, "\\\"", s)
|
|
gsub(/\n/, "\\n", s)
|
|
gsub(/\r/, "\\r", s)
|
|
gsub(/\t/, "\\t", s)
|
|
return s
|
|
}
|
|
|
|
function execute(filename , api_key) {
|
|
get_api_keys()
|
|
api_key = GLOBAL_PUBLIC_KEY
|
|
|
|
# Get extension and language
|
|
ext = get_extension(filename)
|
|
language = ext_map[ext]
|
|
|
|
if (language == "") {
|
|
print RED "Error: Unknown extension: ." ext RESET > "/dev/stderr"
|
|
exit 1
|
|
}
|
|
|
|
# Read file content
|
|
code = ""
|
|
while ((getline line < filename) > 0) {
|
|
if (code != "") code = code "\n"
|
|
code = code line
|
|
}
|
|
close(filename)
|
|
|
|
# Escape for JSON
|
|
escaped_code = escape_json(code)
|
|
|
|
# Build JSON
|
|
json = "{\"language\":\"" language "\",\"code\":\"" escaped_code "\"}"
|
|
|
|
# Write to temp file
|
|
tmp = "/tmp/un_awk_" PROCINFO["pid"] ".json"
|
|
print json > tmp
|
|
close(tmp)
|
|
|
|
# Build HMAC signature if secret key exists
|
|
timestamp = systime()
|
|
sig_headers = ""
|
|
if (GLOBAL_SECRET_KEY != "") {
|
|
# HMAC signature: timestamp:METHOD:path:body
|
|
sig_input = timestamp ":POST:/execute:" json
|
|
sig_tmp = "/tmp/un_awk_sig_" PROCINFO["pid"]
|
|
print sig_input > sig_tmp
|
|
close(sig_tmp)
|
|
sig_cmd = "echo -n '" sig_input "' | openssl dgst -sha256 -hmac '" GLOBAL_SECRET_KEY "' | sed 's/^.* //'"
|
|
sig_cmd | getline signature
|
|
close(sig_cmd)
|
|
system("rm -f " sig_tmp)
|
|
sig_headers = "-H 'X-Timestamp: " timestamp "' -H 'X-Signature: " signature "' "
|
|
}
|
|
|
|
# Call curl
|
|
cmd = "curl -s -X POST '" API_BASE "/execute' " \
|
|
"-H 'Content-Type: application/json' " \
|
|
"-H 'Authorization: Bearer " api_key "' " \
|
|
sig_headers \
|
|
"-d '@" tmp "'"
|
|
|
|
response = ""
|
|
while ((cmd | getline line) > 0) {
|
|
response = response line
|
|
}
|
|
close(cmd)
|
|
|
|
# Clean up
|
|
system("rm -f " tmp)
|
|
|
|
# Check for timestamp authentication errors
|
|
if (match(response, /timestamp/) && (match(response, /401/) || match(response, /expired/) || match(response, /invalid/))) {
|
|
print RED "Error: Request timestamp expired (must be within 5 minutes of server time)" RESET > "/dev/stderr"
|
|
print YELLOW "Your computer's clock may have drifted." RESET > "/dev/stderr"
|
|
print "Check your system time and sync with NTP if needed:" > "/dev/stderr"
|
|
print " Linux: sudo ntpdate -s time.nist.gov" > "/dev/stderr"
|
|
print " macOS: sudo sntp -sS time.apple.com" > "/dev/stderr"
|
|
print " Windows: w32tm /resync" > "/dev/stderr"
|
|
exit 1
|
|
}
|
|
|
|
# Parse stdout from response (simple regex)
|
|
if (match(response, /"stdout":"([^"]*)"/, arr)) {
|
|
stdout = arr[1]
|
|
gsub(/\\n/, "\n", stdout)
|
|
gsub(/\\t/, "\t", stdout)
|
|
gsub(/\\"/, "\"", stdout)
|
|
gsub(/\\\\/, "\\", stdout)
|
|
printf "%s%s%s", BLUE, stdout, RESET
|
|
}
|
|
|
|
# Parse stderr
|
|
if (match(response, /"stderr":"([^"]*)"/, arr)) {
|
|
stderr = arr[1]
|
|
gsub(/\\n/, "\n", stderr)
|
|
gsub(/\\t/, "\t", stderr)
|
|
gsub(/\\"/, "\"", stderr)
|
|
gsub(/\\\\/, "\\", stderr)
|
|
printf "%s%s%s", RED, stderr, RESET > "/dev/stderr"
|
|
}
|
|
|
|
# Parse exit code
|
|
if (match(response, /"exit_code":([0-9]+)/, arr)) {
|
|
exit arr[1]
|
|
}
|
|
}
|
|
|
|
function session_list( timestamp, sig_headers, signature, sig_input, sig_cmd) {
|
|
get_api_keys()
|
|
timestamp = systime()
|
|
sig_headers = ""
|
|
if (GLOBAL_SECRET_KEY != "") {
|
|
sig_input = timestamp ":GET:/sessions:"
|
|
sig_cmd = "echo -n '" sig_input "' | openssl dgst -sha256 -hmac '" GLOBAL_SECRET_KEY "' | sed 's/^.* //'"
|
|
sig_cmd | getline signature
|
|
close(sig_cmd)
|
|
sig_headers = "-H 'X-Timestamp: " timestamp "' -H 'X-Signature: " signature "'"
|
|
}
|
|
cmd = "curl -s '" API_BASE "/sessions' -H 'Authorization: Bearer " GLOBAL_PUBLIC_KEY "' " sig_headers
|
|
while ((cmd | getline line) > 0) print line
|
|
close(cmd)
|
|
}
|
|
|
|
function session_kill(id , timestamp, sig_headers, signature, sig_input, sig_cmd, endpoint) {
|
|
get_api_keys()
|
|
endpoint = "/sessions/" id
|
|
timestamp = systime()
|
|
sig_headers = ""
|
|
if (GLOBAL_SECRET_KEY != "") {
|
|
sig_input = timestamp ":DELETE:" endpoint ":"
|
|
sig_cmd = "echo -n '" sig_input "' | openssl dgst -sha256 -hmac '" GLOBAL_SECRET_KEY "' | sed 's/^.* //'"
|
|
sig_cmd | getline signature
|
|
close(sig_cmd)
|
|
sig_headers = "-H 'X-Timestamp: " timestamp "' -H 'X-Signature: " signature "'"
|
|
}
|
|
cmd = "curl -s -X DELETE '" API_BASE endpoint "' -H 'Authorization: Bearer " GLOBAL_PUBLIC_KEY "' " sig_headers
|
|
system(cmd)
|
|
print GREEN "Session terminated: " id RESET
|
|
}
|
|
|
|
function service_list( timestamp, sig_headers, signature, sig_input, sig_cmd) {
|
|
get_api_keys()
|
|
timestamp = systime()
|
|
sig_headers = ""
|
|
if (GLOBAL_SECRET_KEY != "") {
|
|
sig_input = timestamp ":GET:/services:"
|
|
sig_cmd = "echo -n '" sig_input "' | openssl dgst -sha256 -hmac '" GLOBAL_SECRET_KEY "' | sed 's/^.* //'"
|
|
sig_cmd | getline signature
|
|
close(sig_cmd)
|
|
sig_headers = "-H 'X-Timestamp: " timestamp "' -H 'X-Signature: " signature "'"
|
|
}
|
|
cmd = "curl -s '" API_BASE "/services' -H 'Authorization: Bearer " GLOBAL_PUBLIC_KEY "' " sig_headers
|
|
while ((cmd | getline line) > 0) print line
|
|
close(cmd)
|
|
}
|
|
|
|
function service_destroy(id , timestamp, sig_headers, signature, sig_input, sig_cmd, endpoint) {
|
|
get_api_keys()
|
|
endpoint = "/services/" id
|
|
timestamp = systime()
|
|
sig_headers = ""
|
|
if (GLOBAL_SECRET_KEY != "") {
|
|
sig_input = timestamp ":DELETE:" endpoint ":"
|
|
sig_cmd = "echo -n '" sig_input "' | openssl dgst -sha256 -hmac '" GLOBAL_SECRET_KEY "' | sed 's/^.* //'"
|
|
sig_cmd | getline signature
|
|
close(sig_cmd)
|
|
sig_headers = "-H 'X-Timestamp: " timestamp "' -H 'X-Signature: " signature "'"
|
|
}
|
|
cmd = "curl -s -X DELETE '" API_BASE endpoint "' -H 'Authorization: Bearer " GLOBAL_PUBLIC_KEY "' " sig_headers
|
|
system(cmd)
|
|
print GREEN "Service destroyed: " id RESET
|
|
}
|
|
|
|
function service_dump_bootstrap(id, dump_file , endpoint, json_body, timestamp, sig_headers, signature, sig_input, sig_cmd) {
|
|
get_api_keys()
|
|
print "Fetching bootstrap script from " id "..." > "/dev/stderr"
|
|
|
|
endpoint = "/services/" id "/execute"
|
|
json_body = "{\"command\":\"cat /tmp/bootstrap.sh\"}"
|
|
timestamp = systime()
|
|
sig_headers = ""
|
|
if (GLOBAL_SECRET_KEY != "") {
|
|
sig_input = timestamp ":POST:" endpoint ":" json_body
|
|
sig_cmd = "echo -n '" sig_input "' | openssl dgst -sha256 -hmac '" GLOBAL_SECRET_KEY "' | sed 's/^.* //'"
|
|
sig_cmd | getline signature
|
|
close(sig_cmd)
|
|
sig_headers = "-H 'X-Timestamp: " timestamp "' -H 'X-Signature: " signature "' "
|
|
}
|
|
|
|
# Build the curl command to execute on the service
|
|
cmd = "curl -s -X POST '" API_BASE endpoint "' " \
|
|
"-H 'Content-Type: application/json' " \
|
|
"-H 'Authorization: Bearer " GLOBAL_PUBLIC_KEY "' " \
|
|
sig_headers \
|
|
"-d '" json_body "'"
|
|
|
|
response = ""
|
|
while ((cmd | getline line) > 0) {
|
|
response = response line
|
|
}
|
|
close(cmd)
|
|
|
|
# Parse stdout from response
|
|
if (match(response, /"stdout":"([^"]*)"/, arr)) {
|
|
stdout = arr[1]
|
|
# Unescape JSON
|
|
gsub(/\\n/, "\n", stdout)
|
|
gsub(/\\t/, "\t", stdout)
|
|
gsub(/\\"/, "\"", stdout)
|
|
gsub(/\\\\/, "\\", stdout)
|
|
|
|
if (dump_file != "") {
|
|
# Write to file
|
|
print stdout > dump_file
|
|
close(dump_file)
|
|
system("chmod 755 " dump_file)
|
|
print "Bootstrap saved to " dump_file
|
|
} else {
|
|
# Print to stdout
|
|
printf "%s", stdout
|
|
}
|
|
} else {
|
|
print RED "Error: Failed to fetch bootstrap (service not running or no bootstrap file)" RESET > "/dev/stderr"
|
|
exit 1
|
|
}
|
|
}
|
|
|
|
function read_and_base64(filepath , cmd, b64) {
|
|
cmd = "base64 -w0 '" filepath "' 2>/dev/null || base64 '" filepath "'"
|
|
cmd | getline b64
|
|
close(cmd)
|
|
return b64
|
|
}
|
|
|
|
function build_input_files_json(files_str , n, files, i, fname, b64, json) {
|
|
if (files_str == "") return ""
|
|
n = split(files_str, files, ",")
|
|
json = ",\"input_files\":["
|
|
for (i = 1; i <= n; i++) {
|
|
fname = files[i]
|
|
b64 = read_and_base64(fname)
|
|
if (i > 1) json = json ","
|
|
# Get just the basename for filename
|
|
cmd = "basename '" fname "'"
|
|
cmd | getline basename
|
|
close(cmd)
|
|
json = json "{\"filename\":\"" escape_json(basename) "\",\"content\":\"" b64 "\"}"
|
|
}
|
|
json = json "]"
|
|
return json
|
|
}
|
|
|
|
function session_create(shell, network, vcpu, input_files , json, tmp, timestamp, sig_headers, signature, sig_input, sig_cmd, line, response, input_files_json) {
|
|
get_api_keys()
|
|
|
|
# Build JSON payload
|
|
json = "{\"shell\":\"" (shell != "" ? shell : "bash") "\""
|
|
|
|
if (network != "") {
|
|
json = json ",\"network\":\"" escape_json(network) "\""
|
|
}
|
|
|
|
if (vcpu != "") {
|
|
json = json ",\"vcpu\":" vcpu
|
|
}
|
|
|
|
# Add input_files if provided
|
|
input_files_json = build_input_files_json(input_files)
|
|
if (input_files_json != "") {
|
|
json = json input_files_json
|
|
}
|
|
|
|
json = json "}"
|
|
|
|
# Write to temp file
|
|
tmp = "/tmp/un_awk_sess_" PROCINFO["pid"] ".json"
|
|
print json > tmp
|
|
close(tmp)
|
|
|
|
# Build HMAC signature if secret key exists
|
|
timestamp = systime()
|
|
sig_headers = ""
|
|
if (GLOBAL_SECRET_KEY != "") {
|
|
sig_input = timestamp ":POST:/sessions:" json
|
|
sig_cmd = "echo -n '" sig_input "' | openssl dgst -sha256 -hmac '" GLOBAL_SECRET_KEY "' | sed 's/^.* //'"
|
|
sig_cmd | getline signature
|
|
close(sig_cmd)
|
|
sig_headers = "-H 'X-Timestamp: " timestamp "' -H 'X-Signature: " signature "' "
|
|
}
|
|
|
|
# Call curl
|
|
cmd = "curl -s -X POST '" API_BASE "/sessions' " \
|
|
"-H 'Content-Type: application/json' " \
|
|
"-H 'Authorization: Bearer " GLOBAL_PUBLIC_KEY "' " \
|
|
sig_headers \
|
|
"-d '@" tmp "'"
|
|
|
|
response = ""
|
|
while ((cmd | getline line) > 0) {
|
|
response = response line
|
|
}
|
|
close(cmd)
|
|
|
|
# Clean up
|
|
system("rm -f " tmp)
|
|
|
|
print YELLOW "Session created (WebSocket required)" RESET
|
|
print response
|
|
}
|
|
|
|
function service_create(name, ports, domains, service_type, bootstrap, bootstrap_file, input_files , json, tmp, timestamp, sig_headers, signature, sig_input, sig_cmd, boot_content, line, input_files_json) {
|
|
get_api_keys()
|
|
|
|
# Build JSON payload
|
|
json = "{\"name\":\"" escape_json(name) "\""
|
|
|
|
if (ports != "") {
|
|
json = json ",\"ports\":[" ports "]"
|
|
}
|
|
|
|
if (domains != "") {
|
|
# Split domains by comma and build array
|
|
split(domains, domain_arr, ",")
|
|
json = json ",\"domains\":["
|
|
for (i in domain_arr) {
|
|
if (i > 1) json = json ","
|
|
json = json "\"" escape_json(domain_arr[i]) "\""
|
|
}
|
|
json = json "]"
|
|
}
|
|
|
|
if (service_type != "") {
|
|
json = json ",\"service_type\":\"" escape_json(service_type) "\""
|
|
}
|
|
|
|
if (bootstrap != "") {
|
|
json = json ",\"bootstrap\":\"" escape_json(bootstrap) "\""
|
|
}
|
|
|
|
if (bootstrap_file != "") {
|
|
# Read file content
|
|
boot_content = ""
|
|
while ((getline line < bootstrap_file) > 0) {
|
|
if (boot_content != "") boot_content = boot_content "\n"
|
|
boot_content = boot_content line
|
|
}
|
|
close(bootstrap_file)
|
|
|
|
if (boot_content == "") {
|
|
print RED "Error: Bootstrap file not found or empty: " bootstrap_file RESET > "/dev/stderr"
|
|
exit 1
|
|
}
|
|
|
|
json = json ",\"bootstrap_content\":\"" escape_json(boot_content) "\""
|
|
}
|
|
|
|
# Add input_files if provided
|
|
input_files_json = build_input_files_json(input_files)
|
|
if (input_files_json != "") {
|
|
json = json input_files_json
|
|
}
|
|
|
|
json = json "}"
|
|
|
|
# Write to temp file
|
|
tmp = "/tmp/un_awk_svc_" PROCINFO["pid"] ".json"
|
|
print json > tmp
|
|
close(tmp)
|
|
|
|
# Build HMAC signature if secret key exists
|
|
timestamp = systime()
|
|
sig_headers = ""
|
|
if (GLOBAL_SECRET_KEY != "") {
|
|
sig_input = timestamp ":POST:/services:" json
|
|
sig_cmd = "echo -n '" sig_input "' | openssl dgst -sha256 -hmac '" GLOBAL_SECRET_KEY "' | sed 's/^.* //'"
|
|
sig_cmd | getline signature
|
|
close(sig_cmd)
|
|
sig_headers = "-H 'X-Timestamp: " timestamp "' -H 'X-Signature: " signature "' "
|
|
}
|
|
|
|
# Call curl
|
|
cmd = "curl -s -X POST '" API_BASE "/services' " \
|
|
"-H 'Content-Type: application/json' " \
|
|
"-H 'Authorization: Bearer " GLOBAL_PUBLIC_KEY "' " \
|
|
sig_headers \
|
|
"-d '@" tmp "'"
|
|
|
|
response = ""
|
|
while ((cmd | getline line) > 0) {
|
|
response = response line
|
|
}
|
|
close(cmd)
|
|
|
|
# Clean up
|
|
system("rm -f " tmp)
|
|
|
|
# Print response
|
|
print response
|
|
}
|
|
|
|
function validate_key(do_extend , timestamp, sig_headers, signature, sig_input, sig_cmd) {
|
|
get_api_keys()
|
|
|
|
timestamp = systime()
|
|
sig_headers = ""
|
|
if (GLOBAL_SECRET_KEY != "") {
|
|
sig_input = timestamp ":POST:/keys/validate:"
|
|
sig_cmd = "echo -n '" sig_input "' | openssl dgst -sha256 -hmac '" GLOBAL_SECRET_KEY "' | sed 's/^.* //'"
|
|
sig_cmd | getline signature
|
|
close(sig_cmd)
|
|
sig_headers = "-H 'X-Timestamp: " timestamp "' -H 'X-Signature: " signature "' "
|
|
}
|
|
|
|
# Call curl to validate key
|
|
cmd = "curl -s -X POST '" PORTAL_BASE "/keys/validate' " \
|
|
"-H 'Content-Type: application/json' " \
|
|
"-H 'Authorization: Bearer " GLOBAL_PUBLIC_KEY "' " \
|
|
sig_headers
|
|
|
|
response = ""
|
|
while ((cmd | getline line) > 0) {
|
|
response = response line
|
|
}
|
|
close(cmd)
|
|
|
|
# Parse expired status (simple regex check)
|
|
if (match(response, /"expired":true/)) {
|
|
print RED "Expired" RESET
|
|
|
|
# Extract public_key if present
|
|
if (match(response, /"public_key":"([^"]+)"/, arr)) {
|
|
public_key = arr[1]
|
|
print "Public Key: " public_key
|
|
}
|
|
|
|
# Extract tier
|
|
if (match(response, /"tier":"([^"]+)"/, arr)) {
|
|
print "Tier: " arr[1]
|
|
}
|
|
|
|
# Extract expires_at
|
|
if (match(response, /"expires_at":"([^"]+)"/, arr)) {
|
|
print "Expired: " arr[1]
|
|
}
|
|
|
|
print YELLOW "To renew: Visit https://unsandbox.com/keys/extend" RESET
|
|
|
|
if (do_extend && public_key) {
|
|
url = PORTAL_BASE "/keys/extend?pk=" public_key
|
|
print ""
|
|
print BLUE "Opening browser to: " url RESET
|
|
system("xdg-open '" url "' 2>/dev/null || open '" url "' 2>/dev/null &")
|
|
}
|
|
exit 1
|
|
}
|
|
|
|
# Valid key
|
|
print GREEN "Valid" RESET
|
|
|
|
# Extract and display fields
|
|
if (match(response, /"public_key":"([^"]+)"/, arr)) {
|
|
public_key = arr[1]
|
|
print "Public Key: " public_key
|
|
}
|
|
if (match(response, /"tier":"([^"]+)"/, arr)) {
|
|
print "Tier: " arr[1]
|
|
}
|
|
if (match(response, /"status":"([^"]+)"/, arr)) {
|
|
print "Status: " arr[1]
|
|
}
|
|
if (match(response, /"expires_at":"([^"]+)"/, arr)) {
|
|
print "Expires: " arr[1]
|
|
}
|
|
if (match(response, /"time_remaining":"([^"]+)"/, arr)) {
|
|
print "Time Remaining: " arr[1]
|
|
}
|
|
if (match(response, /"rate_limit":"?([^",}]+)"?/, arr)) {
|
|
print "Rate Limit: " arr[1]
|
|
}
|
|
if (match(response, /"burst":"?([^",}]+)"?/, arr)) {
|
|
print "Burst: " arr[1]
|
|
}
|
|
if (match(response, /"concurrency":"?([^",}]+)"?/, arr)) {
|
|
print "Concurrency: " arr[1]
|
|
}
|
|
|
|
if (do_extend && public_key) {
|
|
url = PORTAL_BASE "/keys/extend?pk=" public_key
|
|
print ""
|
|
print BLUE "Opening browser to: " url RESET
|
|
system("xdg-open '" url "' 2>/dev/null || open '" url "' 2>/dev/null &")
|
|
}
|
|
}
|
|
|
|
function cmd_key(do_extend) {
|
|
validate_key(do_extend)
|
|
}
|
|
|
|
function snapshot_list( timestamp, sig_headers, signature, sig_input, sig_cmd) {
|
|
get_api_keys()
|
|
timestamp = systime()
|
|
sig_headers = ""
|
|
if (GLOBAL_SECRET_KEY != "") {
|
|
sig_input = timestamp ":GET:/snapshots:"
|
|
sig_cmd = "echo -n '" sig_input "' | openssl dgst -sha256 -hmac '" GLOBAL_SECRET_KEY "' | sed 's/^.* //'"
|
|
sig_cmd | getline signature
|
|
close(sig_cmd)
|
|
sig_headers = "-H 'X-Timestamp: " timestamp "' -H 'X-Signature: " signature "'"
|
|
}
|
|
cmd = "curl -s '" API_BASE "/snapshots' -H 'Authorization: Bearer " GLOBAL_PUBLIC_KEY "' " sig_headers
|
|
while ((cmd | getline line) > 0) print line
|
|
close(cmd)
|
|
}
|
|
|
|
function snapshot_info(id , timestamp, sig_headers, signature, sig_input, sig_cmd, endpoint) {
|
|
get_api_keys()
|
|
endpoint = "/snapshots/" id
|
|
timestamp = systime()
|
|
sig_headers = ""
|
|
if (GLOBAL_SECRET_KEY != "") {
|
|
sig_input = timestamp ":GET:" endpoint ":"
|
|
sig_cmd = "echo -n '" sig_input "' | openssl dgst -sha256 -hmac '" GLOBAL_SECRET_KEY "' | sed 's/^.* //'"
|
|
sig_cmd | getline signature
|
|
close(sig_cmd)
|
|
sig_headers = "-H 'X-Timestamp: " timestamp "' -H 'X-Signature: " signature "'"
|
|
}
|
|
cmd = "curl -s '" API_BASE endpoint "' -H 'Authorization: Bearer " GLOBAL_PUBLIC_KEY "' " sig_headers
|
|
while ((cmd | getline line) > 0) print line
|
|
close(cmd)
|
|
}
|
|
|
|
function snapshot_delete(id , timestamp, sig_headers, signature, sig_input, sig_cmd, endpoint) {
|
|
get_api_keys()
|
|
endpoint = "/snapshots/" id
|
|
timestamp = systime()
|
|
sig_headers = ""
|
|
if (GLOBAL_SECRET_KEY != "") {
|
|
sig_input = timestamp ":DELETE:" endpoint ":"
|
|
sig_cmd = "echo -n '" sig_input "' | openssl dgst -sha256 -hmac '" GLOBAL_SECRET_KEY "' | sed 's/^.* //'"
|
|
sig_cmd | getline signature
|
|
close(sig_cmd)
|
|
sig_headers = "-H 'X-Timestamp: " timestamp "' -H 'X-Signature: " signature "'"
|
|
}
|
|
cmd = "curl -s -X DELETE '" API_BASE endpoint "' -H 'Authorization: Bearer " GLOBAL_PUBLIC_KEY "' " sig_headers
|
|
system(cmd)
|
|
print GREEN "Snapshot deleted: " id RESET
|
|
}
|
|
|
|
function session_snapshot(id, name, hot , endpoint, json, tmp, timestamp, sig_headers, signature, sig_input, sig_cmd, line, response) {
|
|
get_api_keys()
|
|
endpoint = "/sessions/" id "/snapshot"
|
|
|
|
# Build JSON payload
|
|
json = "{"
|
|
if (name != "") {
|
|
json = json "\"name\":\"" escape_json(name) "\""
|
|
if (hot != "") json = json ","
|
|
}
|
|
if (hot != "") {
|
|
json = json "\"hot\":" hot
|
|
}
|
|
json = json "}"
|
|
|
|
# Write to temp file
|
|
tmp = "/tmp/un_awk_snap_" PROCINFO["pid"] ".json"
|
|
print json > tmp
|
|
close(tmp)
|
|
|
|
# Build HMAC signature if secret key exists
|
|
timestamp = systime()
|
|
sig_headers = ""
|
|
if (GLOBAL_SECRET_KEY != "") {
|
|
sig_input = timestamp ":POST:" endpoint ":" json
|
|
sig_cmd = "echo -n '" sig_input "' | openssl dgst -sha256 -hmac '" GLOBAL_SECRET_KEY "' | sed 's/^.* //'"
|
|
sig_cmd | getline signature
|
|
close(sig_cmd)
|
|
sig_headers = "-H 'X-Timestamp: " timestamp "' -H 'X-Signature: " signature "' "
|
|
}
|
|
|
|
# Call curl
|
|
cmd = "curl -s -X POST '" API_BASE endpoint "' " \
|
|
"-H 'Content-Type: application/json' " \
|
|
"-H 'Authorization: Bearer " GLOBAL_PUBLIC_KEY "' " \
|
|
sig_headers \
|
|
"-d '@" tmp "'"
|
|
|
|
response = ""
|
|
while ((cmd | getline line) > 0) {
|
|
response = response line
|
|
}
|
|
close(cmd)
|
|
|
|
# Clean up
|
|
system("rm -f " tmp)
|
|
|
|
print GREEN "Snapshot created" RESET
|
|
print response
|
|
}
|
|
|
|
function session_restore(snapshot_id , endpoint, json, tmp, timestamp, sig_headers, signature, sig_input, sig_cmd, line, response) {
|
|
# --restore takes snapshot ID directly, calls /snapshots/:id/restore
|
|
get_api_keys()
|
|
endpoint = "/snapshots/" snapshot_id "/restore"
|
|
|
|
json = "{}"
|
|
|
|
# Write to temp file
|
|
tmp = "/tmp/un_awk_restore_" PROCINFO["pid"] ".json"
|
|
print json > tmp
|
|
close(tmp)
|
|
|
|
# Build HMAC signature if secret key exists
|
|
timestamp = systime()
|
|
sig_headers = ""
|
|
if (GLOBAL_SECRET_KEY != "") {
|
|
sig_input = timestamp ":POST:" endpoint ":" json
|
|
sig_cmd = "echo -n '" sig_input "' | openssl dgst -sha256 -hmac '" GLOBAL_SECRET_KEY "' | sed 's/^.* //'"
|
|
sig_cmd | getline signature
|
|
close(sig_cmd)
|
|
sig_headers = "-H 'X-Timestamp: " timestamp "' -H 'X-Signature: " signature "' "
|
|
}
|
|
|
|
# Call curl
|
|
cmd = "curl -s -X POST '" API_BASE endpoint "' " \
|
|
"-H 'Content-Type: application/json' " \
|
|
"-H 'Authorization: Bearer " GLOBAL_PUBLIC_KEY "' " \
|
|
sig_headers \
|
|
"-d '@" tmp "'"
|
|
|
|
response = ""
|
|
while ((cmd | getline line) > 0) {
|
|
response = response line
|
|
}
|
|
close(cmd)
|
|
|
|
# Clean up
|
|
system("rm -f " tmp)
|
|
|
|
print GREEN "Session restored from snapshot" RESET
|
|
}
|
|
|
|
function service_snapshot(id, name, hot , endpoint, json, tmp, timestamp, sig_headers, signature, sig_input, sig_cmd, line, response) {
|
|
get_api_keys()
|
|
endpoint = "/services/" id "/snapshot"
|
|
|
|
# Build JSON payload
|
|
json = "{"
|
|
if (name != "") {
|
|
json = json "\"name\":\"" escape_json(name) "\""
|
|
if (hot != "") json = json ","
|
|
}
|
|
if (hot != "") {
|
|
json = json "\"hot\":" hot
|
|
}
|
|
json = json "}"
|
|
|
|
# Write to temp file
|
|
tmp = "/tmp/un_awk_snap_" PROCINFO["pid"] ".json"
|
|
print json > tmp
|
|
close(tmp)
|
|
|
|
# Build HMAC signature if secret key exists
|
|
timestamp = systime()
|
|
sig_headers = ""
|
|
if (GLOBAL_SECRET_KEY != "") {
|
|
sig_input = timestamp ":POST:" endpoint ":" json
|
|
sig_cmd = "echo -n '" sig_input "' | openssl dgst -sha256 -hmac '" GLOBAL_SECRET_KEY "' | sed 's/^.* //'"
|
|
sig_cmd | getline signature
|
|
close(sig_cmd)
|
|
sig_headers = "-H 'X-Timestamp: " timestamp "' -H 'X-Signature: " signature "' "
|
|
}
|
|
|
|
# Call curl
|
|
cmd = "curl -s -X POST '" API_BASE endpoint "' " \
|
|
"-H 'Content-Type: application/json' " \
|
|
"-H 'Authorization: Bearer " GLOBAL_PUBLIC_KEY "' " \
|
|
sig_headers \
|
|
"-d '@" tmp "'"
|
|
|
|
response = ""
|
|
while ((cmd | getline line) > 0) {
|
|
response = response line
|
|
}
|
|
close(cmd)
|
|
|
|
# Clean up
|
|
system("rm -f " tmp)
|
|
|
|
print GREEN "Snapshot created" RESET
|
|
print response
|
|
}
|
|
|
|
function service_restore(snapshot_id , endpoint, json, tmp, timestamp, sig_headers, signature, sig_input, sig_cmd, line, response) {
|
|
# --restore takes snapshot ID directly, calls /snapshots/:id/restore
|
|
get_api_keys()
|
|
endpoint = "/snapshots/" snapshot_id "/restore"
|
|
|
|
json = "{}"
|
|
|
|
# Write to temp file
|
|
tmp = "/tmp/un_awk_restore_" PROCINFO["pid"] ".json"
|
|
print json > tmp
|
|
close(tmp)
|
|
|
|
# Build HMAC signature if secret key exists
|
|
timestamp = systime()
|
|
sig_headers = ""
|
|
if (GLOBAL_SECRET_KEY != "") {
|
|
sig_input = timestamp ":POST:" endpoint ":" json
|
|
sig_cmd = "echo -n '" sig_input "' | openssl dgst -sha256 -hmac '" GLOBAL_SECRET_KEY "' | sed 's/^.* //'"
|
|
sig_cmd | getline signature
|
|
close(sig_cmd)
|
|
sig_headers = "-H 'X-Timestamp: " timestamp "' -H 'X-Signature: " signature "' "
|
|
}
|
|
|
|
# Call curl
|
|
cmd = "curl -s -X POST '" API_BASE endpoint "' " \
|
|
"-H 'Content-Type: application/json' " \
|
|
"-H 'Authorization: Bearer " GLOBAL_PUBLIC_KEY "' " \
|
|
sig_headers \
|
|
"-d '@" tmp "'"
|
|
|
|
response = ""
|
|
while ((cmd | getline line) > 0) {
|
|
response = response line
|
|
}
|
|
close(cmd)
|
|
|
|
# Clean up
|
|
system("rm -f " tmp)
|
|
|
|
print GREEN "Service restored from snapshot" RESET
|
|
}
|
|
|
|
function show_help() {
|
|
print "Usage: awk -f un.awk <source_file>"
|
|
print " awk -f un.awk session --list"
|
|
print " awk -f un.awk session --kill ID"
|
|
print " awk -f un.awk session [-s SHELL] [-f FILE]..."
|
|
print " awk -f un.awk session --snapshot SESSION_ID [--snapshot-name NAME] [--hot]"
|
|
print " awk -f un.awk session --restore SNAPSHOT_ID"
|
|
print " awk -f un.awk key [--extend]"
|
|
print " awk -f un.awk service --list"
|
|
print " awk -f un.awk service --create --name NAME [--ports PORTS] [--domains DOMAINS] [--type TYPE] [--bootstrap CMD] [-f FILE]..."
|
|
print " awk -f un.awk service --destroy ID"
|
|
print " awk -f un.awk service --dump-bootstrap ID [--dump-file FILE]"
|
|
print " awk -f un.awk service --snapshot SERVICE_ID [--snapshot-name NAME] [--hot]"
|
|
print " awk -f un.awk service --restore SNAPSHOT_ID"
|
|
print " awk -f un.awk snapshot --list"
|
|
print " awk -f un.awk snapshot --info ID"
|
|
print " awk -f un.awk snapshot --delete ID"
|
|
print ""
|
|
print "Session options:"
|
|
print " -s, --shell SHELL Shell to use (default: bash)"
|
|
print " -f FILE Input file to upload (can be repeated)"
|
|
print " --snapshot SESSION_ID Create snapshot of session"
|
|
print " --restore SNAPSHOT_ID Restore from snapshot ID"
|
|
print " --snapshot-name N Name for snapshot"
|
|
print " --hot Take snapshot without freezing (live snapshot)"
|
|
print ""
|
|
print "Service options:"
|
|
print " --name NAME Service name (required for --create)"
|
|
print " --ports PORTS Comma-separated port numbers"
|
|
print " --domains DOMAINS Comma-separated domain names"
|
|
print " --type TYPE Service type for SRV records (minecraft, mumble, teamspeak, source, tcp, udp)"
|
|
print " --bootstrap CMD Bootstrap command or script"
|
|
print " --dump-bootstrap ID Dump bootstrap script from service"
|
|
print " --dump-file FILE Save bootstrap to file (with --dump-bootstrap)"
|
|
print " -f FILE Input file to upload (can be repeated)"
|
|
print " --snapshot SERVICE_ID Create snapshot of service"
|
|
print " --restore SNAPSHOT_ID Restore from snapshot ID"
|
|
print " --snapshot-name N Name for snapshot"
|
|
print " --hot Take snapshot without freezing (live snapshot)"
|
|
print ""
|
|
print "Snapshot options:"
|
|
print " -l, --list List all snapshots"
|
|
print " --info ID Get snapshot details"
|
|
print " --delete ID Delete a snapshot"
|
|
print ""
|
|
print "Requires: UNSANDBOX_API_KEY environment variable"
|
|
}
|
|
|
|
# Main logic
|
|
{
|
|
# This block processes each input line from files passed as arguments
|
|
# For our CLI, we process ARGV instead
|
|
}
|
|
|
|
END {
|
|
if (ARGC < 2) {
|
|
show_help()
|
|
exit 0
|
|
}
|
|
|
|
if (ARGV[1] == "--help" || ARGV[1] == "-h") {
|
|
show_help()
|
|
exit 0
|
|
}
|
|
|
|
if (ARGV[1] == "session") {
|
|
if (ARGC >= 3 && ARGV[2] == "--list") {
|
|
session_list()
|
|
} else if (ARGC >= 4 && ARGV[2] == "--kill") {
|
|
session_kill(ARGV[3])
|
|
} else if (ARGC >= 4 && ARGV[2] == "--snapshot") {
|
|
# Parse snapshot options
|
|
snapshot_name = ""
|
|
hot = ""
|
|
i = 4
|
|
while (i < ARGC) {
|
|
if (ARGV[i] == "--snapshot-name" && i + 1 < ARGC) {
|
|
snapshot_name = ARGV[i + 1]
|
|
i += 2
|
|
} else if (ARGV[i] == "--hot") {
|
|
hot = "true"
|
|
i++
|
|
} else {
|
|
i++
|
|
}
|
|
}
|
|
session_snapshot(ARGV[3], snapshot_name, hot)
|
|
} else if (ARGC >= 4 && ARGV[2] == "--restore") {
|
|
# --restore takes snapshot ID directly
|
|
session_restore(ARGV[3])
|
|
} else {
|
|
# Parse session creation arguments
|
|
shell = ""
|
|
network = ""
|
|
vcpu = ""
|
|
input_files = ""
|
|
|
|
i = 2
|
|
while (i < ARGC) {
|
|
if ((ARGV[i] == "--shell" || ARGV[i] == "-s") && i + 1 < ARGC) {
|
|
shell = ARGV[i + 1]
|
|
i += 2
|
|
} else if (ARGV[i] == "-n" && i + 1 < ARGC) {
|
|
network = ARGV[i + 1]
|
|
i += 2
|
|
} else if (ARGV[i] == "-v" && i + 1 < ARGC) {
|
|
vcpu = ARGV[i + 1]
|
|
i += 2
|
|
} else if (ARGV[i] == "-f" && i + 1 < ARGC) {
|
|
if (input_files != "") input_files = input_files ","
|
|
input_files = input_files ARGV[i + 1]
|
|
i += 2
|
|
} else {
|
|
if (substr(ARGV[i], 1, 1) == "-") {
|
|
print "Unknown option: " ARGV[i] > "/dev/stderr"
|
|
usage()
|
|
exit 1
|
|
}
|
|
i++
|
|
}
|
|
}
|
|
|
|
session_create(shell, network, vcpu, input_files)
|
|
}
|
|
exit 0
|
|
}
|
|
|
|
if (ARGV[1] == "key") {
|
|
do_extend = 0
|
|
if (ARGC >= 3 && ARGV[2] == "--extend") {
|
|
do_extend = 1
|
|
}
|
|
cmd_key(do_extend)
|
|
exit 0
|
|
}
|
|
|
|
if (ARGV[1] == "snapshot") {
|
|
if (ARGC >= 3 && (ARGV[2] == "--list" || ARGV[2] == "-l")) {
|
|
snapshot_list()
|
|
} else if (ARGC >= 4 && ARGV[2] == "--info") {
|
|
snapshot_info(ARGV[3])
|
|
} else if (ARGC >= 4 && ARGV[2] == "--delete") {
|
|
snapshot_delete(ARGV[3])
|
|
} else {
|
|
print "Usage: awk -f un.awk snapshot --list|--info ID|--delete ID"
|
|
}
|
|
exit 0
|
|
}
|
|
|
|
if (ARGV[1] == "service") {
|
|
if (ARGC >= 3 && ARGV[2] == "--list") {
|
|
service_list()
|
|
} else if (ARGC >= 4 && ARGV[2] == "--destroy") {
|
|
service_destroy(ARGV[3])
|
|
} else if (ARGC >= 4 && ARGV[2] == "--dump-bootstrap") {
|
|
dump_file = ""
|
|
if (ARGC >= 6 && ARGV[4] == "--dump-file") {
|
|
dump_file = ARGV[5]
|
|
}
|
|
service_dump_bootstrap(ARGV[3], dump_file)
|
|
} else if (ARGC >= 4 && ARGV[2] == "--snapshot") {
|
|
# Parse snapshot options
|
|
snapshot_name = ""
|
|
hot = ""
|
|
i = 4
|
|
while (i < ARGC) {
|
|
if (ARGV[i] == "--snapshot-name" && i + 1 < ARGC) {
|
|
snapshot_name = ARGV[i + 1]
|
|
i += 2
|
|
} else if (ARGV[i] == "--hot") {
|
|
hot = "true"
|
|
i++
|
|
} else {
|
|
i++
|
|
}
|
|
}
|
|
service_snapshot(ARGV[3], snapshot_name, hot)
|
|
} else if (ARGC >= 4 && ARGV[2] == "--restore") {
|
|
# --restore takes snapshot ID directly
|
|
service_restore(ARGV[3])
|
|
} else if (ARGV[2] == "--create") {
|
|
# Parse service creation arguments
|
|
name = ""
|
|
ports = ""
|
|
domains = ""
|
|
service_type = ""
|
|
bootstrap = ""
|
|
bootstrap_file = ""
|
|
input_files = ""
|
|
|
|
i = 3
|
|
while (i < ARGC) {
|
|
if (ARGV[i] == "--name" && i + 1 < ARGC) {
|
|
name = ARGV[i + 1]
|
|
i += 2
|
|
} else if (ARGV[i] == "--ports" && i + 1 < ARGC) {
|
|
ports = ARGV[i + 1]
|
|
i += 2
|
|
} else if (ARGV[i] == "--domains" && i + 1 < ARGC) {
|
|
domains = ARGV[i + 1]
|
|
i += 2
|
|
} else if (ARGV[i] == "--type" && i + 1 < ARGC) {
|
|
service_type = ARGV[i + 1]
|
|
i += 2
|
|
} else if (ARGV[i] == "--bootstrap" && i + 1 < ARGC) {
|
|
bootstrap = ARGV[i + 1]
|
|
i += 2
|
|
} else if (ARGV[i] == "--bootstrap-file" && i + 1 < ARGC) {
|
|
bootstrap_file = ARGV[i + 1]
|
|
i += 2
|
|
} else if (ARGV[i] == "-f" && i + 1 < ARGC) {
|
|
if (input_files != "") input_files = input_files ","
|
|
input_files = input_files ARGV[i + 1]
|
|
i += 2
|
|
} else {
|
|
i++
|
|
}
|
|
}
|
|
|
|
if (name == "") {
|
|
print RED "Error: --name is required for service creation" RESET > "/dev/stderr"
|
|
exit 1
|
|
}
|
|
|
|
service_create(name, ports, domains, service_type, bootstrap, bootstrap_file, input_files)
|
|
} else {
|
|
print "Usage: awk -f un.awk service --list|--create|--destroy ID"
|
|
}
|
|
exit 0
|
|
}
|
|
|
|
# Default: execute file
|
|
execute(ARGV[1])
|
|
}
|